Commit Graph
518 Commits
Author SHA1 Message Date
James Cole 37552dbdba Workflow edits. 2026-07-10 22:41:15 +02:00
James Cole e84bff6c51 Try to speed up some steps. 2026-07-10 22:34:20 +02:00
James Cole d8f95e2e37 Also build v1 2026-07-09 20:04:33 +02:00
James Cole 6ab228bd0e Still need to build v1. 2026-07-09 20:03:19 +02:00
James Cole def641ad36 Committed to the wrong branch, damn. 2026-07-09 19:51:52 +02:00
James Cole 81ab6a576c Add step 2026-07-09 19:34:54 +02:00
James Cole 0211347d9a Clean up for v3. 2026-07-09 19:30:50 +02:00
James Cole b4dcbc2d94 Expand security policy 2026-07-04 06:29:10 +02:00
James ColeandGitHub b48a40f1e2 Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-07-03 05:51:49 +02:00
James ColeandGitHub 1b8bb452c3 Enhance PR reply workflow to include github-actions check
Added check for 'github-actions' author to prevent processing.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-07-03 05:48:05 +02:00
James Cole 8f71ff061d Fix workflow. 2026-06-30 19:20:24 +02:00
James ColeandGitHub 1136eb8542 Update security.md to specify SSRF and DNS issues
Clarified security advisory guidelines regarding SSRF and DNS/hostname issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-30 18:42:08 +02:00
dependabot[bot]andGitHub 999e52c857 Bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 03:52:53 +00:00
James ColeandGitHub ea51e47a66 Update release.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:44:41 +02:00
James ColeandGitHub d2d94bdc38 Add JSON generation step for v3 in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:17:08 +02:00
James ColeandGitHub 91ab6ec55b Fix branch checkout logic in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:01:21 +02:00
James ColeandGitHub 4229196713 Fix branch checkout logic in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 04:56:37 +02:00
James ColeandGitHub 515522cbb1 Update release.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 04:53:23 +02:00
James ColeandGitHub 66af080b09 Update lock-threads action to use dessant version
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-28 05:10:49 +02:00
James ColeandGitHub 2c14a605e4 Remove AI assistance disclosure comments
Removed AI assistance disclosure comments from the workflow.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-21 12:32:32 +02:00
James Cole f00852aa6a Merge branch 'main' into develop 2026-05-21 06:22:28 +02:00
James ColeandGitHub 195fb6cdb7 Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-21 06:07:37 +02:00
James Cole 8b0f790a56 Merge branch 'main' into develop 2026-05-20 20:18:10 +02:00
James ColeandGitHub b70ed32952 Merge pull request #12271 from alanturing881/fix/stored-xss-ale-piggy-name
Fix stored XSS in audit log view via piggy bank name (ale.twig)
2026-05-20 20:16:16 +02:00
James ColeandGitHub 9e511c822e Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-20 20:12:40 +02:00
James ColeandGitHub ec1dfca2b5 Enhance PR workflow to check for author
Added logic to check for the author of the pull request.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-19 08:15:40 +02:00
James Cole fe0e8796ca Merge branch 'main' into develop 2026-05-17 04:50:57 +02:00
James Cole e83c5b9f86 New workflow. 2026-05-17 04:50:34 +02:00
James Cole 9558f05947 Merge branch 'main' into develop 2026-05-17 04:29:39 +02:00
James ColeandGitHub 9436eeacaf Update warning about AI-generated security advisories
Clarified consequences of reporting AI-generated security advisories.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-17 03:44:01 +02:00
James Cole e059753c43 Merge branch 'main' into develop 2026-05-16 20:39:12 +02:00
James ColeandGitHub 2a68c48e2a Update security reporting guidelines in security.md
Clarified instructions for reporting false security issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:05:44 +02:00
James ColeandGitHub c394034876 Clarify AI hallucinations in security reporting
Reworded the third point to clarify AI hallucinations in security issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:05:20 +02:00
James ColeandGitHub 7bd91048ea Update security.md with reporting guidelines
Clarified reporting guidelines for security issues to prevent false reports.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:03:49 +02:00
James Cole d64bca7700 Merge branch 'main' into develop 2026-05-16 19:54:22 +02:00
James ColeandGitHub 7d768cfa23 Add AI-generated security advisories section
Added a section regarding AI-generated security advisories to clarify reporting policies and potential consequences.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 19:52:56 +02:00
James Cole fd50fbf193 Merge branch 'main' into develop 2026-05-12 18:48:04 +02:00
dependabot[bot]andGitHub 8cf8e91448 Bump actions/dependency-review-action from 4 to 5
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-11 03:56:03 +00:00
James Cole 1cc471fcc4 New guidelines. 2026-05-05 19:51:57 +02:00
github-actions[bot]andGitHub 8c8af51bc4 Merge pull request #12200 from firefly-iii/develop
🤖 Automatically merge the PR into the main branch.
2026-04-27 18:55:46 +02:00
James ColeandGitHub e4b1c3045e Update Mago Lint command to use vendor path
Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-27 18:50:27 +02:00
James Cole e974594fe3 Merge branch 'main' into develop 2026-04-27 18:46:22 +02:00
James ColeandGitHub c93a2dc23a Refactor CI workflow by removing Mago setup
Removed Mago setup step and updated command path.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-27 18:41:58 +02:00
James ColeandGitHub eb4971fec6 Add latest version setup for Mago in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-27 18:36:24 +02:00
James ColeandGitHub 0c63a3380d Refactor Setup Mago step in release workflow
Removed working-directory input from Setup Mago step.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-27 18:32:52 +02:00
James Cole edd30b2d42 Merge branch 'main' into develop 2026-04-27 18:28:03 +02:00
James ColeandGitHub e8ab7d8a93 Specify version for Mago setup in release workflow
Update Mago setup to use a specific version.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-27 18:20:27 +02:00
James Cole c0eca4298a Updated templates. 2026-04-27 18:14:58 +02:00
James Cole 1983eefe00 Merge branch 'main' into develop 2026-04-18 06:00:08 +02:00
James ColeandGitHub a9a03fe0d0 Update release.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-04-18 05:59:50 +02:00